Dissecting Sustainability Assurance Standards: A Guide to the Credibility of Your Sustainability Report in the New Era of Accountability

The paradigm of sustainability reporting has fundamentally shifted. Activities once considered ancillary corporate social responsibility (CSR) have now become central elements of corporate strategy, risk management, and value creation. In this new era of accountability, unverified claims are a liability. Sustainability Report Assurance, or the process of independent verification, is the mechanism that transforms a sustainability report from a mere compliance document into a trusted strategic asset.  

The demand for this verification has surged with increasing scrutiny from investors, customers, and regulators. This process not only enhances trust and transparency but also directly influences market perception and company value. The demand for assurance signals a fundamental market shift where "trust" is no longer an abstract concept but a quantifiable asset with direct financial implications. Similar to how financial audits build confidence in financial statements, sustainability assurance now plays a crucial role in investment decisions and company valuations. The market is now beginning to price in the risk of unverified Environmental, Social, and Governance (ESG) data. The absence of assurance can be interpreted as a higher risk profile, potentially lowering valuations or making it harder to access capital from ESG-focused investment funds. Thus, the cost of assurance is not merely an operational expense but a strategic investment to mitigate the risks of non-financial disclosure, ultimately preserving and even enhancing the companys financial value.  

The Main Drivers Behind the Need for Assurance: Four Pillars of Modern Demands

The push for companies to seek independent verification of their ESG reports stems from four interconnected major forces that reflect the demands of the modern business landscape.

Investor and Capital Market Demands: Money Talks Louder

Modern investors and financial institutions now view ESG performance as a proxy for long-term financial health and effective risk management. For them, data that has undergone an assurance process is an absolute requirement for credible investment analysis. A study by DNV found that 72% of businesses globally believe that compliance with ESG regulations makes their organization more valuable in the eyes of investors. Sustainability reports that have been independently verified are rated higher by investors and banks analyzing a companys environmental, climate, and social risks. This directly affects a companys ability to attract capital and ultimately aims to create sustainable value, supported by the transparency and accountability facilitated by assurance.  

Regulatory Compliance: An Ever-Evolving Landscape

Regulators worldwide, including in Indonesia, are moving towards mandatory ESG disclosure and assurance requirements. This makes compliance a forward-looking necessity. In Indonesia, the Financial Services Authority (OJK) through OJK Regulation (POJK) Number 51/POJK.03/2017 has mandated the publication of Sustainability Reports. Although assurance is currently voluntary or stated as "if any" in the regulations appendix , this has set a clear regulatory expectation for transparency.  

At the global level, this trend is more pronounced. Regulations like the Corporate Sustainability Reporting Directive (CSRD) in the European Union have made assurance mandatory, starting with limited assurance and moving towards reasonable assurance. This development is important because global regulatory trends often influence domestic policies in the future. Furthermore, the establishment of new standards like the International Standard on Sustainability Assurance (ISSA) 5000 by the International Auditing and Assurance Standards Board (IAASB) signals a move towards standardization and tightening of assurance practices globally.  

Risk and Reputation Management: Protecting Company Value

Assurance is a powerful instrument for mitigating the increasing risk of "greenwashing" and for strengthening the internal control environment. Independent verification ensures that the information published is valid, reliable, and accountable, thereby reducing the risk of greenwashing accusations that can damage reputation. The practice of greenwashing itself is considered a form of deceptive reporting, and assurance serves as a mechanism to combat it.  

Moreover, the assurance process inherently forces companies to evaluate and improve their internal systems, processes, and data collection methods. This process helps identify weaknesses in the ESG management system before they become damaging public issues. A strong reputation, built on verified claims, ultimately enhances brand value and makes the company more attractive to consumers, business partners, and top talent.  

Competitive Advantage: Differentiating in a Crowded Market

In an increasingly competitive market, verified sustainability performance becomes a key differentiator that can open new revenue streams and improve customer relationships. A solid sustainability strategy validated by assurance can yield a real competitive advantage. Assurance is now a competitive necessity. As more companies include supply chain impacts (Scope 3 emissions) in their targets, the demand for attested data from partners and vendors will increase. Companies without verified data risk being excluded from major value chains. Ultimately, demonstrating leadership in sustainability through transparent and verified reporting can enhance public image, leading to stronger brand loyalty and a larger market share.  

The Map of Assurance Standards: Understanding the Three Main Frameworks

As demand increases, the landscape of standards for conducting assurance is also evolving. Understanding the differences between the main frameworks is crucial for companies to choose the most appropriate approach.

ISAE 3000 (Revised): The Foundation of Assurance for Non-Financial Information

The International Standard on Assurance Engagements (ISAE) 3000 (Revised), issued by the IAASB, is a general standard that forms the foundation for many assurance practices for non-financial information. This standard was first released in 2003 and later revised, making it a mature and tested framework. Its core approach is principles-based, providing significant flexibility for practitioners to use their professional judgment in determining the scope and testing methods, with a strong emphasis on comprehensive evidence-gathering procedures and the independence of the assurer. Historically, ISAE 3000 has been the de facto standard for sustainability report assurance and is generally performed by professional accountants bound by the IESBA Code of Ethics.  

AA1000 Assurance Standard (AA1000AS v3): A Principle-Based and Stakeholder-Focused Approach

Published by AccountAbility, AA1000AS has a unique focus: evaluating the extent to which an organization adheres to the AA1000 AccountAbility Principles (AA1000AP). This standard goes beyond mere data verification and emphasizes the quality of the sustainability management process itself. Its assurance process is rooted in four main principles :  

• Inclusivity: Stakeholder involvement in decision-making. Assurance will evaluate how the company meaningfully identifies and engages its stakeholders.  

• Materiality: Identification of the most important and relevant sustainability issues for the organization and its stakeholders.  

• Responsiveness: How the organization responds to these material issues transparently through actions, decisions, and communication.  

• Impact: The organizations monitoring, measurement, and accountability for the real-world effects of its actions on the broader ecosystem.  

AA1000AS is often considered a more holistic and forward-looking "next-generation" standard. It is flexible and can be used complementarily with other frameworks like ISAE 3000 and GRI. Assurance service providers using this standard must be officially licensed by AccountAbility.  

ISSA 5000: The Future Global Standard for Sustainability Assurance

The International Standard on Sustainability Assurance (ISSA) 5000, General Requirements for Sustainability Assurance Engagements, is a new overarching standard from the IAASB specifically designed for the assurance of sustainability reports. This standard was approved at the end of 2024 and will become effective for reporting periods beginning on or after December 15, 2026. After its effective date, ISSA 5000 will replace ISAE 3000 for sustainability assurance purposes.  

ISSA 5000 is designed to be framework-neutral, meaning it can be used with any reporting framework (e.g., GRI, IFRS S1/S2, ESRS), and is profession-agnostic, allowing its use by both accountants and other expert practitioners (such as environmental engineers or scientists) provided they comply with equivalent ethical and quality management requirements. The standard is explicitly created to address the unique challenges in sustainability assurance, such as verifying value chain information, qualitative data, and forward-looking statements.  

The evolution from the general ISAE 3000, to the process-focused AA1000AS, to the sustainability-specific ISSA 5000, reflects a journey towards "convergence and specialization." Just as financial reporting has its own auditing standards (ISAs), sustainability reporting, now considered equally important, is finally getting a purpose-built assurance standard. This marks the end of an era where sustainability assurance was seen as an add-on and the beginning of an era where it has discipline, rigor, and a framework equivalent to financial audits. ISSA 5000 becomes the convergence point where the best practices of general assurance and a focus on stakeholders are combined into one comprehensive framework that will enhance the quality and consistency of assurance globally.  

Determining the Level of Confidence: Limited vs. Reasonable Assurance

After selecting a standard, a company must decide on the level of confidence it wishes to obtain. This choice has significant practical implications for the process, cost, and stakeholder perception.

Limited Assurance

Limited assurance provides a lower level of confidence. The assurers conclusion is typically stated in a "negative" form, such as "based on the procedures we have performed, nothing has come to our attention that causes us to believe that the information... contains a material misstatement." The procedures performed are more limited, generally focusing on interviews with management, analytical procedures, and understanding processes, without in-depth testing of internal control systems. Due to less effort and evidence gathering, the cost for limited assurance is lower and the process is faster. This is the most common level of assurance voluntarily adopted by companies and is often the starting point required by new regulations.  

Reasonable Assurance

Reasonable assurance provides a high, though not absolute, level of confidence, comparable to a financial statement audit. The conclusion is stated in a "positive" form, such as "in our opinion, the information... is presented fairly, in all material respects, in accordance with the applicable criteria." To achieve this level, the assurer must perform much more extensive procedures, including a deep understanding and testing of internal control systems, substantive testing of data, detailed sample verification, and often requires site visits for validation. Consequently, reasonable assurance is far more expensive, time-consuming, and resource-intensive. This level is typically chosen when the risk of material misstatement is considered high or when a company wants to provide the highest level of confidence to its stakeholders.  

The choice between limited and reasonable assurance is not merely a technical or cost-based decision, but a strategic one that must consider the potential "expectation gap" from stakeholders. A company choosing limited assurance for cost efficiency must proactively manage the risk that investors and the public might misinterpret the level of assurance provided. Research shows that although investors can distinguish between the two levels, they tend to be overly confident in limited assurance and do not fully understand its difference from reasonable assurance. This creates a risk where a company has incurred the cost of assurance, but if a problem is later discovered, the reputational damage could be more severe due to a perceived betrayal of trust. Therefore, a smart strategy is not only to choose a level of assurance but also to clearly communicate the limitations of that level in the report. This also explains why regulators like the European Union plan a gradual transition from limited to reasonable assurance, giving companies time to strengthen their internal systems and for the market to mature.  

The Assurance Landscape in Indonesia: Challenges, Trends, and Internal Readiness

Although standards and best practices are global, their application in Indonesia has a unique context, challenges, and trends.

Adoption Trends in Indonesia: Rapid Growth from a Low Base

The practice of sustainability report assurance in Indonesia, though starting from a low base, is showing a very rapid growth trend. Historically, the adoption rate was low; a study observing reports from 2014-2018 found only about 18% of companies had their sustainability reports assured , while another study in 2022 showed a figure of around 10%. However, the latest data from the International Federation of Accountants (IFAC) covering 2023 highlights Indonesia as one of five jurisdictions with a double-digit increase in assurance adoption that year. This is a very strong signal of acceleration, indicating that the Indonesian market is moving quickly to align with global expectations, driven by increasing awareness and investor pressure. Assurance service providers in Indonesia are also diverse, ranging from Public Accounting Firms (KAP) to specialist consultants and non-KAP certification bodies.  

Common Challenges in Assurance Implementation

Before being ready for external verification, many companies in Indonesia face significant internal challenges. The most fundamental challenge is data quality and availability. ESG data is often scattered across various departments, managed manually in spreadsheets, lacks a clear audit trail, and is inconsistent. This is exacerbated by weak internal processes and controls, where many companies do not yet have Standard Operating Procedures (SOPs) for ESG data collection, unclear accountability, and no periodic reviews. Additionally, a lack of internal expertise on complex ESG metrics and resource limitations, both in terms of time and cost, are major barriers for many companies, especially medium-sized ones. Without strong commitment from top leadership, the necessary resource allocation and cultural changes to overcome these challenges are often difficult to achieve.  

Building Internal Readiness: The Role of Internal Audit and the COSO Framework

Successful external assurance always starts from within. Building a strong internal control environment is an absolute prerequisite. This is where the internal audit function plays a crucial role. The internal audit team can provide objective assurance on ESG data and processes, review the relevance of reported metrics, help build an effective ESG control environment, and integrate ESG into regular audit plans. They serve as the third line of defense, validating the organizations readiness before facing external verification.  

To build such control systems, companies can leverage the COSO Internal Control-Integrated Framework. This well-tested framework for financial reporting (ICFR) has now been extended to sustainability reporting (ICSR - Internal Control over Sustainability Reporting). By applying the five COSO components—Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring Activities—to ESG data and processes, companies can create "regulator-grade" quality data that is accurate, traceable, and audit-ready.  

Ultimately, assurance readiness has become a new indicator of operational excellence. A companys ability to efficiently produce verifiable ESG data is no longer just a compliance function. It is a reflection of a higher level of maturity in processes, governance, and data management that is inherently superior and more resilient. The process of becoming "assurance-ready" forces companies to break down data silos, automate processes, establish clear SOPs, and instill accountability across the organization. Smart investors will see this capability not just as a sign of transparency, but as a signal of a fundamentally well-managed company that is more likely to outperform in the long run.  

Conclusion: From Compliance to Strategic Excellence with the Right Partner

The business world now demands a new level of accountability. A sustainability report without independent verification will lose its credibility in the eyes of increasingly critical stakeholders. Understanding the differences between existing assurance standards—such as ISAE 3000, AA1000AS, and the future standard ISSA 5000—and choosing the right level of assurance between limited and reasonable is a strategic decision that will shape market perception. However, this journey must begin from within, by building strong and reliable data processes, controls, and governance.

In this complex landscape, clarity is power. Companies that are proactive in building assurance readiness will not only meet market and regulatory demands but will also discover operational efficiencies, better risk management, and a sustainable competitive advantage.

Your Assurance Partner: BATS Sustainability Assurer

In this complex landscape, choosing the right assurance partner is a crucial step. PT Keberlanjutan Menjaga Bumi, through its professional services brand BATS Sustainability Assurer, is here as your trusted partner on the journey to credible and accountable reporting. We are not just a verification service provider; we are a strategic partner dedicated to strengthening your companys sustainability foundation from within.

Our Profile: Expertise, Integrity, and Local Insight

BATS Sustainability Assurer was founded with a mission to bridge the gap between business practices in Indonesia and global sustainability expectations. Our team consists of licensed professionals and multi-disciplinary experts—from accountants experienced in ISAE 3000 to sustainability specialists who are well-versed in the AA1000 principles. We understand the context of OJK regulations and the unique challenges faced by companies in Indonesia, while continuously monitoring the development of global standards like ISSA 5000 to ensure our clients are always one step ahead.

Comprehensive Services from BATS Sustainability Assurer

We offer a range of assurance services designed to meet the specific needs of your company, at every stage of reporting maturity:

• Sustainability Report Assurance Services: We provide independent assurance services at both limited and reasonable confidence levels in accordance with ISAE 3000 and AA1000AS standards. Our thorough process ensures your report is not only compliant but also credible in the eyes of investors, regulators, and other stakeholders.

• Assurance Readiness Advisory: Before entering the formal assurance process, we help you prepare. This service includes a gap analysis of your data collection processes, strengthening of internal control systems (ICSR) based on the COSO framework, and validation of your reporting methodologies. The goal is to ensure the assurance process is smooth, efficient, and effective.

• Verification of Specific ESG Claims & Data: Beyond the full sustainability report, we also provide verification for specific ESG claims or data, such as Greenhouse Gas (GHG) emissions calculations, water usage data, or the achievement of specific social targets. This provides focused validation on the metrics that are most material to your business.

With BATS Sustainability Assurer, transform your sustainability report from a mere compliance obligation into a strategic asset that builds trust, enhances reputation, and unlocks long-term value. Contact us today to start your assurance journey with confidence.

_______________

About BATS Consulting

BATS Consulting is a leading strategic consulting firm in Indonesia, delivering comprehensive solutions in accounting, taxation, finance, legal, and sustainability (ESG). With an internationally experienced team and a data-driven approach, BATS empowers clients across industries to improve compliance, operational efficiency, and long-term growth strategies. Our core services include transfer pricing, tax audits, M&A advisory, carbon emission management, and carbon credit markets—positioning BATS as a trusted partner for today’s complex business challenges.

With the principle of "global insight with local relevance," BATS Consulting delivers tailored solutions that meet international standards while addressing local regulatory nuances. Based in Jakarta, we are the preferred consulting partner for national and multinational companies seeking sustainable competitive advantage. Whatever your business challenge, BATS stands ready as a strategic and adaptive partner to lead you toward success.

Contact BATS Consulting:

Address: Indonesia Stock Exchange Building, Tower 1 Level3 Suite 304, SCBD Jl. Jend. Sudirman Kav. 52-53. Jakarta Selatan 12190

Email: info@bats-consulting.com

Website: www.bats-consulting

Phone/WhatsApp: +62816 1105 174